Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
File: cub9InHd4QiG2X_xRwPlgaIEtl4.mft (raw, json)
Hash identifier: U3/kaVaHZUA258n2hG5tLlQuSAm55OaSBbhswOgKDeI=
Subject key identifier: 4B:9E:80:03:8A:F4:85:69:32:3F:3C:67:CB:6F:86:33:14:F4:6C:B0
Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e
Certificate serial: 019CB1363CB3346657AD921258DCABA7E02D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
Manifest number: 081F
Signing time: Tue 03 Mar 2026 01:00:47 +0000
Manifest this update: Tue 03 Mar 2026 01:00:47 +0000
Manifest next update: Wed 04 Mar 2026 01:00:47 +0000
Files and hashes: 1: aMBkxohgXCBHlVf4cqZehB-dZl8.roa (hash: 52GsVdhZ9s3mGch2GNyJmZC5fofL+PlpDWV6v2/k90g=)
2: cub9InHd4QiG2X_xRwPlgaIEtl4.crl (hash: xy3jvIC06rjxDmmWheaqBGdRmL/eWCrlct7iXmIksZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:36:3c:b3:34:66:57:ad:92:12:58:dc:ab:a7:e0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e
Validity
Not Before: Mar 3 01:00:47 2026 GMT
Not After : Mar 4 01:00:47 2026 GMT
Subject: CN=4b9e80038af48569323f3c67cb6f863314f46cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:92:9c:df:63:2d:90:5a:65:30:dd:c1:81:
d8:9d:9f:9b:3a:d0:33:78:88:16:38:4d:e9:42:d6:
61:8a:ba:f5:88:ef:07:24:59:1b:cf:28:84:64:18:
c9:6e:1e:b5:d9:68:aa:7f:bd:4c:8f:d8:ed:84:74:
e8:53:06:56:9f:98:1c:e7:1b:4b:ad:b9:df:3a:7e:
0a:c3:17:75:0a:72:04:5f:1f:b7:13:8c:0b:66:9a:
f4:8d:fa:fa:bf:fc:5d:31:af:6b:e0:42:9d:d0:a2:
a2:aa:66:d6:11:6e:c2:17:f0:70:32:79:c7:3b:69:
6e:3d:4a:c8:c9:67:f3:d5:d3:98:5c:4f:a6:26:a5:
4f:76:80:2d:7d:6e:d3:09:b6:bf:e4:82:db:da:fc:
04:8f:ad:88:ae:ff:12:aa:7b:f6:19:b1:90:31:c7:
79:04:15:a8:9b:ed:0c:c0:f7:cb:c2:5a:63:9d:8c:
cb:b6:0a:9a:d2:6c:45:db:7a:31:93:20:db:27:b3:
9a:50:0f:d6:40:53:54:2b:79:44:90:9c:06:e9:86:
b8:59:39:b3:4d:7d:46:f5:60:c1:7e:9a:68:44:8b:
36:08:b2:1d:64:72:e6:1d:be:35:97:73:49:d5:12:
e5:8a:08:58:b9:63:e5:60:3f:f3:64:80:b0:d4:66:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9E:80:03:8A:F4:85:69:32:3F:3C:67:CB:6F:86:33:14:F4:6C:B0
X509v3 Authority Key Identifier:
keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d3:59:d9:a4:39:af:e3:ae:69:29:56:4f:ca:6a:7a:2c:28:
8e:1c:d8:53:44:6f:57:dc:2d:25:a1:0c:52:be:0a:16:0b:8a:
3c:f7:cc:66:32:bb:d8:e3:68:10:2b:3e:59:29:e5:bd:85:ee:
3a:ca:3e:4d:21:0e:d5:35:4b:93:04:60:d2:0a:35:37:c6:6d:
79:4d:cb:94:0e:e8:3d:71:60:b4:ec:26:b2:dc:ab:90:fd:e2:
64:0f:14:cb:5d:77:2d:56:d0:ca:96:d7:bd:22:b8:24:af:86:
52:e8:02:4c:40:c0:09:9b:dc:6f:e8:e6:8a:3e:dd:59:21:8b:
3e:82:ed:e1:f2:a9:84:aa:db:86:f8:35:34:3f:3c:1f:45:86:
d1:f8:54:01:1b:a1:4d:33:2b:ed:b0:da:90:ad:ea:76:f7:5b:
03:f4:1e:0a:98:47:74:a1:1d:6b:10:94:07:60:40:0f:66:eb:
06:b6:84:6b:ea:ed:95:fa:a5:02:73:6e:cc:45:47:89:b4:d1:
a8:a4:d8:ec:01:5d:d9:30:e9:09:b7:81:de:bb:de:17:86:96:
c9:65:39:d5:72:42:30:50:4c:fe:d9:8e:03:0b:ae:4a:a7:bb:
fd:4a:67:a8:4a:6f:e1:5c:f1:20:75:ac:13:7b:4a:a0:e8:57:
dd:9c:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:17 2026 by rpki-client